CVE-2024-13042

CVE-2024-13042 affects Tsinghua Unigroup Electronic Archives Management System 3.2.210802(62532). The vulnerability is in the download function at /Searchnew/Subject/download.html where manipulation of the argument path enables information disclosure. It is exploitable remotely, and public PoC/pu...